ability.rb

class Ability
  include CanCan::Ability

  def initialize(user)
    if user.is? :admin
      can :read, :all
      can :manage, Activity, :user_id => [user.id, *user.asm_ids]
    elsif user.is? :supervisor
      can :manage, Activity, :user_id => [user.id, *user.asm_ids]
    elsif user.is? :ASM
      can :manage, Activity, :user_id => user.id
    end
    
    can :read, Contact
    can :manage, Contact do |contact|
      contact && user.contact_ids.include?(contact.id)
    end
  end
end